$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a433a78-b220-3403-a25a-b0fc438ea893.roa File: 0a433a78-b220-3403-a25a-b0fc438ea893.roa (raw, json) Hash identifier: 8ERZthpmNCCtaD55ZYiGbK4gN0Zk7WrGASFjkKLTVP0= Subject key identifier: 36:EC:C8:5B:57:CC:06:EC:F0:EA:CA:AB:2A:03:79:AD:97:E5:B0:25 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F0219A07B4F22D58D176680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a433a78-b220-3403-a25a-b0fc438ea893.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2600:8800:b726::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:19:a0:7b:4f:22:d5:8d:17:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=50e8e4a6-83a1-4ec6-8d74-fbeb9afa60a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:2c:c2:99:75:6b:7a:98:bb:14:1c:41:85: 7b:de:ca:59:4e:8c:88:ec:ab:fa:4f:1b:e1:83:28: 31:89:14:79:88:14:ad:c6:28:c4:40:d9:7b:da:d3: 45:71:6c:35:15:83:73:37:d5:e3:a9:09:10:94:f5: 76:08:ce:98:b8:41:87:e7:d5:4b:4d:c1:a7:ec:be: 56:d6:04:5b:62:6f:78:38:b1:2e:48:e1:25:50:2e: 03:dc:4b:70:90:41:71:c3:99:46:d3:08:e8:f0:88: 72:d6:a4:c7:3b:68:7d:49:e4:8c:e4:36:26:be:75: 1e:61:64:a4:81:ca:de:5c:ec:69:c0:4e:2b:b1:14: 0e:30:a4:6d:94:8a:24:b3:17:4a:9a:f2:b2:63:6b: 25:ba:82:d2:51:fa:b2:9e:c3:6a:ba:4c:5a:3b:44: 22:a9:41:50:7b:32:fb:b4:c7:c9:10:4b:c9:da:f8: ad:0b:0a:8b:f7:e3:66:ad:96:4f:12:6a:17:8b:33: 7a:53:d4:d5:57:17:1a:f3:d1:0e:48:53:0e:bc:84: 9d:e0:db:e9:d7:b3:15:cd:30:7e:2d:da:8c:f1:6b: 0d:6d:11:84:a9:81:4f:21:69:d4:07:51:5b:c4:39: d8:0e:62:aa:e7:ba:b6:a8:10:a7:30:c5:a6:72:76: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EC:C8:5B:57:CC:06:EC:F0:EA:CA:AB:2A:03:79:AD:97:E5:B0:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a433a78-b220-3403-a25a-b0fc438ea893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:b726::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:2f:69:60:9c:34:e9:03:67:fb:99:08:5e:ce:e6:89:77:eb: 67:13:98:80:15:f3:11:08:7a:6e:3e:07:75:8d:e2:3b:79:05: 71:d9:b6:1c:ca:a1:35:38:4f:cc:13:3f:01:5a:a4:ae:84:f8: 71:2c:d1:64:14:c4:74:4d:69:c2:1a:1d:a2:83:15:15:cf:c3: b1:a3:08:70:bd:c0:45:9b:7d:55:89:81:fb:23:c8:83:0b:1d: fa:97:ec:71:89:2a:c1:5c:3f:4f:64:4b:c7:e0:75:6e:af:64: 06:db:eb:d0:15:0f:4d:e1:68:b2:ca:7c:3a:34:21:b0:89:d7: ec:5a:c8:75:31:21:ca:09:db:cd:f0:c0:56:70:f6:b7:c2:ec: c3:52:83:07:b3:7b:c4:6a:ec:4e:c6:c4:7e:5e:fc:47:7f:95: 16:67:9a:a7:d9:c1:99:a8:c1:f1:d0:c6:96:7a:e1:00:98:2a: c9:7c:2a:ab:e8:c1:b6:9b:57:54:54:fb:20:5c:5e:c5:10:19: 7c:55:3e:8a:59:f7:d9:de:20:73:c0:20:3b:65:93:2c:02:ed: 1d:ae:1c:88:ee:41:16:c7:65:b8:5a:c6:c3:f2:81:02:b9:fb: 3a:6c:a6:2e:5c:41:eb:88:e1:11:7b:31:5e:5e:74:28:0f:bf: 47:6b:04:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAhmge08i1Y0XZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NTBlOGU0YTYtODNhMS00ZWM2LThkNzQtZmJlYjlhZmE2MGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZIswpl1a3qYuxQcQYV73spZToyI7Kv6Txvh gygxiRR5iBStxijEQNl72tNFcWw1FYNzN9XjqQkQlPV2CM6YuEGH59VLTcGn7L5W 1gRbYm94OLEuSOElUC4D3EtwkEFxw5lG0wjo8Ihy1qTHO2h9SeSM5DYmvnUeYWSk gcreXOxpwE4rsRQOMKRtlIoksxdKmvKyY2sluoLSUfqynsNqukxaO0QiqUFQezL7 tMfJEEvJ2vitCwqL9+NmrZZPEmoXizN6U9TVVxca89EOSFMOvISd4Nvp17MVzTB+ LdqM8WsNbRGEqYFPIWnUB1FbxDnYDmKq57q2qBCnMMWmcnZIdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDbsyFtXzAbs8OrKqyoDea2X5bAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGE0MzNhNzgtYjIyMC0z NDAzLWEyNWEtYjBmYzQzOGVhODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIALcm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADsvaWCcNOkDZ/uZCF7O5ol362cTmIAV8xEIem4+B3WN4jt5BXHZ thzKoTU4T8wTPwFapK6E+HEs0WQUxHRNacIaHaKDFRXPw7GjCHC9wEWbfVWJgfsj yIMLHfqX7HGJKsFcP09kS8fgdW6vZAbb69AVD03haLLKfDo0IbCJ1+xayHUxIcoJ 283wwFZw9rfC7MNSgweze8Rq7E7GxH5e/Ed/lRZnmqfZwZmowfHQxpZ64QCYKsl8 KqvowbabV1RU+yBcXsUQGXxVPopZ99neIHPAIDtlkywC7R2uHIjuQRbHZbhaxsPy gQK5+zpspi5cQeuI4RF7MV5edCgPv0drBDg= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:41 2025 by rpki-client